Are you okay if your computer has a setting called SSDP turned on in your local network?
Are you okay if your computer has a setting called SSDP turned on in your local network?
I set up Ntopng as a docker container on my server. I noticed that SSDP is active right now. I didn't know much about this SSDP protocol before, so I did some research. It seems like it helps find devices on our local network automatically. Is it normal to see the SSDP protocol running on my LAN and also show a remote IP in the list besides just my devices' local IPs?
So everyone knows what an SSDP is: check that link on Wikipedia. It's just a regular tool. Did you check your computer's IP address too? And did you even scan your machine to make sure there isn't any bad stuff hiding in the back?
Those IP numbers in the 239.x.x.x range are used for sending messages to many people at once, but this kind of message never went out on the real internet. Also, the 239 area is only meant for use inside your own network, so even if there were any multicast networks online, you couldn't send these messages anywhere else from your local computer.
Ok, thanks. I want to know what kind of service or program uses multicast today.
It looks like you might find this in the network tab of your resource manager. I'm not exactly sure how they track things with multicast compared to regular sessions.